The development of web browsers has made it possible for people to share information with each other. However, as the use of browsers increases and their uses become more diverse, vulnerabilities are increasingly being discovered and exploited to cause various types of damage, such as stealing personal information from an unspecified number of people or maliciously placing malicious code in the browser to infect computers. In particular, most attacks are related to memory vulnerabilities, and web browsers also use the memory of JavaScript and WebAssembly through the V8 engine, and WebAssembly is a recently introduced low-level byte code language, so there are various problems. Typically, WebAssembly uses linear memory to improve browser speed. However, problems such as stack-based buffer overflows, heap metadata corruption, and data overwriting have arisen. As a recently emerged language, not much research has been done on it. Accordingly, this paper proposes memory protection through WeBMO, which uses the Bitwise Memory Operation (BMO) obfuscation technique to address WebAssembly's memory problem by manipulating and merging memory bit by bit using bitwise operations. Obfuscation is a technique that makes code written in a programming language difficult to read. By applying this obfuscation to WebAssembly memory, we propose a WeBMO design that mitigates vulnerabilities and protects memory from attackers.
原文链接
分享
引用
